Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/Nb5y6wg5Gc2MdajX44snAQ2vXbQ.roa
File: Nb5y6wg5Gc2MdajX44snAQ2vXbQ.roa (raw, json)
Hash identifier: IVzSZFgZruH1Xs+W9VO7Liy5sZgYJqxmjZzjxu6GK2c=
Subject key identifier: 35:BE:72:EB:08:39:19:CD:8C:75:A8:D7:E3:8B:27:01:0D:AF:5D:B4
Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial: 3319B110
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/Nb5y6wg5Gc2MdajX44snAQ2vXbQ.roa
Signing time: Sat 01 Jan 2022 14:58:18 +0000
ROA not before: Sat 01 Jan 2022 14:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197650
IP address blocks: 62.102.152.0/21 maxlen: 21
185.30.112.0/24 maxlen: 24
185.30.113.0/24 maxlen: 24
185.30.114.0/24 maxlen: 24
185.30.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857321744 (0x3319b110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
Validity
Not Before: Jan 1 14:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35be72eb083919cd8c75a8d7e38b27010daf5db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:bf:3c:08:6a:5a:7e:d5:8c:e7:14:c4:b8:
65:f2:b4:ca:9c:5a:76:fd:81:73:6a:c5:24:97:39:
50:07:c3:52:ca:46:c1:db:fd:fb:30:bf:b3:44:f6:
da:6b:7c:3d:6a:5f:8c:38:06:c3:b4:8e:2e:ba:34:
e1:2b:cb:ad:ff:db:d1:0d:84:31:4b:ae:4d:e0:78:
65:28:38:ba:a0:49:16:b6:a5:10:30:de:74:6e:7e:
4c:7c:c2:b0:d9:de:fb:1f:3e:05:81:89:d0:33:54:
88:ed:20:75:4c:76:c9:7b:2b:96:a8:25:ef:f9:87:
ce:55:69:8a:99:c2:64:6d:c4:5b:26:25:f8:53:da:
ee:b0:b5:13:94:40:2b:f4:ab:91:ff:f3:1d:41:06:
de:b3:b6:a0:ae:70:dd:fd:50:1f:9c:cc:6c:ac:1b:
38:d9:30:fc:42:f1:cb:ff:dd:23:a9:07:68:46:09:
03:07:2c:08:38:2d:25:14:d4:cb:c3:50:b8:a4:a7:
b7:39:28:b3:a5:87:d4:24:1e:74:ea:e5:dd:19:5d:
ca:f1:9d:4f:b3:52:69:4e:83:c2:85:87:38:5f:19:
f2:5a:2a:0f:3e:eb:81:5b:0f:99:cd:80:b6:5b:e2:
be:5a:57:b1:19:9d:af:c0:38:58:64:bb:0c:85:9a:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BE:72:EB:08:39:19:CD:8C:75:A8:D7:E3:8B:27:01:0D:AF:5D:B4
X509v3 Authority Key Identifier:
keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/Nb5y6wg5Gc2MdajX44snAQ2vXbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.152.0/21
185.30.112.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:d2:e7:c2:f7:c7:fd:74:0d:52:2f:e9:7e:27:1b:af:ff:87:
dd:e4:ee:8f:6f:e3:1f:47:6d:69:4a:18:08:09:c1:ae:14:c1:
76:5e:bb:e4:e5:31:17:27:f2:03:7f:64:8d:51:5b:2f:d8:59:
69:70:09:8b:72:da:d2:10:8e:57:29:81:d6:7f:0c:ec:eb:d9:
e7:1f:f9:2d:76:29:1f:3f:b9:ed:1c:fb:ef:68:80:e7:45:8e:
34:10:7a:57:5e:81:ba:26:1d:6d:04:65:af:f7:6b:db:dd:04:
13:ac:ab:c9:d3:76:50:5d:77:08:b3:6a:9c:f0:46:94:69:75:
4f:34:99:b3:d1:a1:e4:fb:66:fb:a7:12:7b:ad:33:f8:05:c1:
89:f4:39:93:6d:03:9e:91:8a:36:e0:11:58:8f:c0:c4:3c:69:
1b:cc:64:58:9b:db:f9:2f:9b:4f:d2:cf:01:c3:9f:7e:35:aa:
28:4d:f5:74:fd:41:34:8b:ec:a6:f7:ac:b4:69:4f:bb:23:08:
b6:d2:16:78:1c:ec:0b:d0:dc:5e:d2:34:8f:cd:56:10:e6:35:
db:c1:ae:1a:ec:9e:2f:8c:10:68:c6:6b:80:3d:8f:3b:b6:7a:
f8:2d:4a:87:fb:3c:98:8a:9f:8a:12:64:2e:14:f9:50:d2:a4:
b3:0b:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org